CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- intel xeon bronze 3104 firmware, xeon bronze 3106 firmware, xeon bronze 3204 firmware +206 more +208 moreImproper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged...8.2 High
- intel quartus primeImproper authentication in the Intel(R) Quartus Prime Pro and Standard edition software may allow...6.7 Medium
- intel quartus primeCross-site scripting in the Intel(R) Quartus Prime Pro and Standard edition software may allow an...2.8 Low
- intel quartus primeInsufficient control flow management in the Intel(R) Quartus Prime Pro and Standard edition...7.3 High
- intel quartus primeImproper neutralization in the Intel(R) Quartus Prime Pro and Standard edition software may allow...7.3 High
- intel quartus primePath traversal in the Intel(R) Quartus Prime Pro and Standard edition software may allow an...7.3 High
- intel sgx sdkInsufficient control flow management for the Intel(R) SGX SDK software for Linux before version 2...2.5 Low
- intel atom c5310 firmware, atom c5315 firmware, atom c5320 firmware +63 more +65 moreInsufficient granularity of access control in out-of-band management in some Intel(R) Atom and...7.5 High
- intel sgx sdkImproper conditions check in the Intel(R) SGX SDK software may allow a privileged user to...2.5 Low
- intel oneapi dpc\+\+\/c\+\+ compiler runtimeUncontrolled search path element in the Intel(R) oneAPI DPC++/C++ Compiler Runtime before version...6.7 Medium
- intel mpi libraryUncontrolled search path element in the Intel(R) MPI Library before version 2021.6 for Intel(R)...6.7 Medium
- intel distribution for pythonUncontrolled search path element in the Intel(R) Distribution for Python programming language...6.7 Medium
- intel oneapi collective communications libraryUncontrolled search path element in the Intel(R) oneAPI Collective Communications Library (oneCCL...6.7 Medium
- intel oneapi deep neural networkUncontrolled search path element in the Intel(R) oneAPI Deep Neural Network (oneDNN) before...6.7 Medium
- intel oneapi data analytics libraryUncontrolled search path element in the Intel(R) oneAPI Data Analytics Library (oneDAL) before...6.7 Medium
- intel openmpUncontrolled search path element in the Intel(R) oneAPI Toolkit OpenMP before version 2022.1 may...6.7 Medium
- intel trace analyzer and collectorUncontrolled search path element in the Intel(R) Trace Analyzer and Collector before version 2021...6.7 Medium
- intel fpga add-onUncontrolled search path element in the Intel(R) FPGA Add-on for Intel(R) oneAPI Base Toolkit...6.7 Medium
- intel oneapi dpc\+\+\/c\+\+ compilerInsufficient visual distinction of homoglyphs presented to user in the Intel(R) oneAPI DPC++/C++...8.3 High
- intel oneapi-cliInsecure inherited permissions in the Intel(R) oneAPI Toolkits oneapi-cli before version 0.2.0...7.5 High
- intel c\+\+ compiler classicImproper handling of Unicode encoding in source code to be compiled by the Intel(R) C++ Compiler...8.3 High
- go standard library path/filepath, golang go +1 morePath traversal on Windows in path/filepath7.5 High
- ardatan graphql-mesh, the-guild graphql mesh cli, graphql mesh http +2 moreUnwanted access to the entire file system vulnerability due to a missing check in `staticFiles` HTTP handler in graphql-mesh5.8 Medium
- hashicorp go-getterGo-Getter Vulnerable to Decompression Bombs4.2 Medium
ca-certificatesTuxCareUpdate of ca-certificatesNo scorenssTuxCare,nss-develTuxCare,nss-pkcs11-develTuxCare +2 more +4 moreUpdate of nssNo scoreca-certificatesTuxCareUpdate of alt-phpNo scorelibnss3TuxCare,libnss3-1dTuxCare,libnss3-devTuxCare +2 more +4 moreUpdate of alt-phpNo scoreshim-ia32TuxCare,shim-x64TuxCare +1 moreUpdate of shimNo score- cisco node-joseImproper calculations in ECC implementation can trigger a Denial-of-Service (DoS)7.5 High
ca-certificatesTuxCareUpdate of ca-certificatesNo scorenssTuxCare,nss-develTuxCare,nss-pkcs11-develTuxCare +8 more +10 moreUpdate of nssNo scoreshim-ia32TuxCare,shim-x64TuxCare +1 moreUpdate of shimNo score- fortinet fortiwanAn improper neutralization of special elements used in an OS command vulnerability [CWE-78] in...8.0 High
- fortinet fortios, fortiproxy +1 moreA missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the DHCP and...3.1 Low
- fortinet fortisandboxA use of password hash with insufficient computational effort vulnerability [CWE-916] in...5.4 Medium
- fortinet fortinacSeveral improper neutralization of inputs during web page generation vulnerability [CWE-79] in...6.7 Medium
- fortinet fortiwebA double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute...7.1 High
- fortinet fortios, fortiproxy +1 moreA improper neutralization of crlf sequences in http headers ('http response splitting') in...4.0 Medium
- fortinet fortinacA improper neutralization of argument delimiters in a command ('argument injection') in Fortinet...7.2 High
- fortinet fortinacA external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5,...9.8 Critical
- fortinet fortinac, fortinac-f +1 moreSome cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7,...6.0 Medium
- fortinet fortinac, fortinac-f +1 moreAn improper restriction of xml external entity reference in Fortinet FortiNAC version 9.4.0...6.9 Medium
- fortinet fortinacAn insufficiently protected credentials in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5,...7.4 High
- fortinet fortiadcA improper neutralization of special elements used in an os command ('os command injection') in...7.4 High
- fortinet fortiextender, fortiextender firmware +1 moreA improper neutralization of special elements used in an os command ('os command injection') in...7.0 High
- fortinet fortios, fortiproxy +1 moreAn improper privilege management vulnerability [CWE-269] in Fortinet FortiOS version 7.2.0 and...4.0 Medium
- fortinet fortiosAn improper neutralization of input during web page generation [CWE-79] vulnerability in FortiOS...8.6 High
- fortinet fortios, fortiproxy +1 moreAn improper certificate validation vulnerability [CWE-295] in FortiOS 7.2.0 through 7.2.3, 7.0.0...4.4 Medium
- fortinet fortianalyzerAn improper neutralization of input during web page generation vulnerability [CWE-79] in...4.2 Medium
- Show moreLoading…